a story of a security...
TRANSCRIPT
A Story of A Security ProfessionalA Story of A Security ProfessionalMiSSConf (SP4.0)MiSSConf (SP4.0)
March 31, 2018March 31, 2018
WhoAmI
● Lazy Blogger– Japan, Security, FOSS, Politics, Christian– http://narudomr.blogspot.com
● Information Security since 1995● Head of IT Security and Solution Architecture, Kiatnakin Bank● Consultant for OWASP Thailand Chapter● Committee Member, Cloud Security Alliance (CSA), Thailand
Chapter● Committee Member, National Digital ID Project, Technical
Team● Chief Information Security Officer (CISO) of the Year 2017,
NetworkWorld Asia
Enter the Digital World
Enter the Computer World
Information Security First Start
● In 1995, started working with Information and Telecommunication Services (ITS) → NETOne
● Business Development● Raptor Systems Inc’s
Eagle Firewall– The First Proxy Type
Firewall– Integration
● Sun OS, Windows NT● RSA SecureID● IPSec VPN
Internet Application Era
Embedded System Development
Embedded System Development
An Example of A Device Running with My Code
Solution Architect
Certification???
Security Operation and Data Analytics
BehaviorAnalysis
FunctionalAnalysis
StructuralAnalysis
Security PolicyDate/
Time/Source Match
System StatusSystem
Exposure
Vulnerability Database
Message Analysis
Intrusion Path
Alert Stats
www.cust1.comhack1.com
hack2.com
mail.cust1.comhack1.com
hack3.com
www.cust2.comhack2.com
hack3.com
hack1.comwww.cust1.com
mail.cust1.com
hack2.comwww.cust1.com
www.cust2.com
hack3.commail.cust1.com
www.cust2.com
Source &Target Correlation
ContextsContexts
Application Security
Turn from IT Vendors to an IT Consumer
● Vendors’ Events● Technology Event Organizers’ Events
Social Contribution
National Projects
Awards
Conclusion
● You may not know what technology will be in the next 10 years so the fundamental principles are essential much more than what you can do today.
● Every circumstances happen to your life are worthy, even good or bad, even you like or not. If you learn you can use them in the future.
● Teaching or sharing is the best way to sharpen your knowledge and skills but don’t use other people’s materials.
